Visitors from 0 countries

Furthest visitor: —

\n \n\n \n\n \n \n \n\n`;\n}\n\n// ---------------------------------------------------------------------------\n// Admin helpers\n// ---------------------------------------------------------------------------\n\nfunction escHtml(s: string): string {\n return String(s)\n .replace(/&/g, \"&\")\n .replace(//g, \">\")\n .replace(/\"/g, \""\");\n}\n\nfunction getLoginHTML(showError: boolean): string {\n return `\n\n\n \n \n Admin Login — Visitor Map\n \n\n\n

Admin Login

\n ${showError ? '

Incorrect password. Try again.

' : \"\"}\n \n

\n\n`;\n}\n\ntype PinRow = {\n id: number;\n lat: number;\n lon: number;\n country_code: string;\n postal_code: string;\n created_at: string;\n};\n\nfunction getAdminHTML(secret: string, pins: PinRow[]): string {\n const rows = pins.map((p) => `\n \n ${p.id}\n ${escHtml(p.country_code)}\n ${escHtml(p.postal_code)}\n ${Number(p.lat).toFixed(4)}\n ${Number(p.lon).toFixed(4)}\n ${escHtml(String(p.created_at ?? \"\"))}\n \n `).join(\"\");\n\n return `\n\n\n \n \n Admin — Visitor Map\n \n\n\n

Admin — Visitor Map

\n ← Back to map\n

${pins.length} pin${\n pins.length !== 1 ? \"s\" : \"\"\n }

\n \n \n \n \n \n \n \n ${rows || ''}\n \n

ID	Country	Postal Code	Lat	Lon	Added
No pins yet.

\n \n\n`;\n}\n\n// ---------------------------------------------------------------------------\n// Request handler\n// ---------------------------------------------------------------------------\n\nconst JSON_HEADERS = { \"Content-Type\": \"application/json\" };\n\nexport default async function handler(req: Request): Promise {\n const url = new URL(req.url);\n const path = url.pathname;\n\n // Admin page\n if (path === \"/admin\") {\n const adminSecret = Deno.env.get(\"ADMIN_SECRET\") ?? \"\";\n if (!adminSecret) {\n return new Response(\n \"ADMIN_SECRET environment variable is not configured.\",\n {\n status: 500,\n headers: { \"Content-Type\": \"text/plain\" },\n },\n );\n }\n const provided = url.searchParams.get(\"secret\") ?? \"\";\n if (provided !== adminSecret) {\n const showError = url.searchParams.has(\"secret\");\n return new Response(getLoginHTML(showError), {\n status: showError ? 401 : 200,\n headers: { \"Content-Type\": \"text/html; charset=utf-8\" },\n });\n }\n const result = await sqlite.execute(\n \"SELECT id, lat, lon, country_code, postal_code, created_at FROM pins ORDER BY id DESC\",\n );\n const pins: PinRow[] = result.rows.map(\n ([id, lat, lon, country_code, postal_code, created_at]) => ({\n id: Number(id),\n lat: Number(lat),\n lon: Number(lon),\n country_code: String(country_code),\n postal_code: String(postal_code),\n created_at: String(created_at ?? \"\"),\n }),\n );\n return new Response(getAdminHTML(adminSecret, pins), {\n headers: { \"Content-Type\": \"text/html; charset=utf-8\" },\n });\n }\n\n // DELETE /api/pins/:id — admin only\n const deleteMatch = path.match(/^\\/api\\/pins\\/(\\d+)$/);\n if (deleteMatch && req.method === \"DELETE\") {\n const adminSecret = Deno.env.get(\"ADMIN_SECRET\") ?? \"\";\n const provided = url.searchParams.get(\"secret\") ?? \"\";\n if (!adminSecret || provided !== adminSecret) {\n return new Response(JSON.stringify({ error: \"Unauthorized\" }), {\n status: 401,\n headers: JSON_HEADERS,\n });\n }\n const id = parseInt(deleteMatch[1], 10);\n await sqlite.execute({ sql: \"DELETE FROM pins WHERE id = ?\", args: [id] });\n return new Response(JSON.stringify({ ok: true }), {\n headers: JSON_HEADERS,\n });\n }\n\n if (path === \"/api/pins\") {\n // GET /api/pins — return all stored pins\n if (req.method === \"GET\") {\n const result = await sqlite.execute(\n \"SELECT id, lat, lon, country_code, postal_code FROM pins ORDER BY id\",\n );\n const pins = result.rows.map((\n [id, lat, lon, country_code, postal_code],\n ) => ({\n id,\n lat,\n lon,\n country_code,\n postal_code,\n }));\n return new Response(JSON.stringify(pins), { headers: JSON_HEADERS });\n }\n\n // POST /api/pins — geocode and store a new pin\n if (req.method === \"POST\") {\n let body: any;\n try {\n body = await req.json();\n } catch {\n return new Response(JSON.stringify({ error: \"Invalid JSON\" }), {\n status: 400,\n headers: JSON_HEADERS,\n });\n }\n\n const postalCode: string = (body.postal_code ?? \"\").trim();\n const countryCode: string = (body.country_code ?? \"\").trim()\n .toUpperCase();\n\n if (!postalCode || !countryCode) {\n return new Response(\n JSON.stringify({\n error: \"postal_code and country_code are required\",\n }),\n { status: 400, headers: JSON_HEADERS },\n );\n }\n\n if (!isValidPostalCode(postalCode, countryCode)) {\n return new Response(\n JSON.stringify({\n error:\n \"That doesn't look like a valid postal code for the selected country.\",\n }),\n { status: 422, headers: JSON_HEADERS },\n );\n }\n\n let coords: [number, number] | null = null;\n try {\n coords = await geocode(postalCode, countryCode);\n } catch {\n // coords stays null\n }\n\n if (!coords) {\n return new Response(\n JSON.stringify({\n error:\n \"Could not find that location. Please check your postal code.\",\n }),\n { status: 422, headers: JSON_HEADERS },\n );\n }\n\n const [lat, lon] = coords;\n if (!Number.isFinite(lat) || !Number.isFinite(lon)) {\n return new Response(\n JSON.stringify({\n error:\n \"Could not find that location. Please check your postal code.\",\n }),\n { status: 422, headers: JSON_HEADERS },\n );\n }\n\n await sqlite.execute({\n sql:\n \"INSERT INTO pins (lat, lon, country_code, postal_code) VALUES (?, ?, ?, ?)\",\n args: [lat, lon, countryCode, postalCode],\n });\n\n return new Response(\n JSON.stringify({\n lat,\n lon,\n country_code: countryCode,\n postal_code: postalCode,\n }),\n { status: 201, headers: JSON_HEADERS },\n );\n }\n\n return new Response(\"Method Not Allowed\", { status: 405 });\n }\n\n // All other paths → serve the frontend\n return new Response(getHTML(), {\n headers: { \"Content-Type\": \"text/html; charset=utf-8\" },\n });\n}","deleted","label",[116],"pulls",1,"forks","envVars",{"_139":133,"_141":51},"connections",{"_139":51,"_140":51},"count","unfilledCount","emptyCount",{"_20":115,"_13":116,"_117":118,"_119":-5,"_120":21,"_121":30,"_122":109,"_22":143,"_29":124,"_125":126,"_127":128,"_129":38,"_130":-5,"_144":145,"_90":146},["D",1771964720829],"children",[],[116],["D",1771958422380],["D",1789534231467],{"_11":12,"_88":84},{"_11":12,"_82":-5,"_83":84,"_44":45,"_85":86,"_87":38},{"_29":30,"_13":26,"_20":21,"_27":28,"_31":-5,"_32":-5,"_77":-5,"_78":-5,"_79":-5,"_80":14,"_81":12},"ctx",{"_70":-5,"_111":185,"_186":187,"_188":189,"_190":38,"_191":38,"_192":38,"_193":109,"_194":-5,"_195":-7,"_196":-7,"_197":51,"_198":38,"_199":38,"_200":-5,"_201":38,"_202":38,"_203":38,"_204":-5},"ENV",{"_156":157,"_158":159,"_160":26,"_161":162,"_163":164,"_165":166,"_167":168,"_169":170,"_171":172,"_173":174,"_175":176,"_177":178,"_179":180,"_181":182,"_183":184},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Where are you from?

Admin Login

Admin — Visitor Map

Branches1

Branches
1